Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0B2871DC54261C0A0EA37A5B8879E292492F1577.cer
File:                     0B2871DC54261C0A0EA37A5B8879E292492F1577.cer (raw, json)
Hash identifier:          Hmohemka+OBmZgBYexu4fbxph8mUiciTJgz8kLzQjHs=
Subject key identifier:   0B:28:71:DC:54:26:1C:0A:0E:A3:7A:5B:88:79:E2:92:49:2F:15:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30722CA555B9A162C9BC11D0C34479E92F618B8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/0B2871DC54261C0A0EA37A5B8879E292492F1577.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 04 Sep 2022 02:40:06 +0000
Certificate not after:    Sun 03 Sep 2023 02:45:06 +0000
Subordinate resources:    AS: 267177
                          IP: 45.230.232.0/22
                          IP: 2804:4950::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:72:2c:a5:55:b9:a1:62:c9:bc:11:d0:c3:44:79:e9:2f:61:8b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 02:40:06 2022 GMT
            Not After : Sep  3 02:45:06 2023 GMT
        Subject: CN=0B2871DC54261C0A0EA37A5B8879E292492F1577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:95:da:5b:73:53:55:06:58:05:19:77:90:
                    67:fe:0c:3b:42:5f:c4:19:40:4e:f9:df:ee:d3:e4:
                    76:fd:4c:4f:90:23:76:e6:3c:bd:cd:e1:af:3a:00:
                    73:d4:5d:50:df:b8:fb:14:d4:2b:0b:ae:4f:bb:c2:
                    5f:be:07:21:41:de:4f:83:d2:64:20:74:61:c1:d8:
                    fd:1a:b4:6e:14:54:28:7e:c4:29:5e:cc:0e:ab:24:
                    49:14:0c:de:cc:89:05:ac:f2:06:98:12:89:fd:09:
                    e8:26:9d:78:11:af:ec:37:99:b9:c6:58:d4:82:0b:
                    5d:81:50:6b:8c:7a:b6:da:c5:e5:21:a0:cd:41:2c:
                    da:fc:7f:55:1c:b4:be:52:1d:31:ae:fc:2b:d3:d9:
                    03:9a:07:99:0c:b9:0c:02:6e:4c:83:7d:ef:89:1c:
                    0d:b7:37:68:d7:9a:6f:17:c6:35:5d:ec:67:98:30:
                    06:a9:55:81:ac:7f:9f:45:d3:b3:a6:a6:37:b0:ff:
                    ba:0e:90:bc:88:2c:f5:dd:e5:6f:22:7e:86:44:7d:
                    af:cb:9e:dc:c6:20:f5:48:df:69:3e:9a:34:4e:e9:
                    cf:c4:1d:7c:7d:c1:5d:9b:ad:7c:41:b7:40:59:f9:
                    c5:3a:49:e7:8d:41:f5:4a:fa:56:18:d6:64:e1:00:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:28:71:DC:54:26:1C:0A:0E:A3:7A:5B:88:79:E2:92:49:2F:15:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/0B2871DC54261C0A0EA37A5B8879E292492F1577.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.232.0/22
                IPv6:
                  2804:4950::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267177

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:22:2e:0b:22:22:c9:71:8e:3e:9b:d1:10:27:9e:64:32:
         b7:48:f9:65:0e:e4:b9:8f:dc:62:cd:2d:cb:8a:26:4b:1d:51:
         0d:98:3c:d0:42:0d:a7:d8:80:dd:28:d0:57:c5:76:1a:79:a2:
         95:79:c3:18:b0:7b:30:a6:70:53:ae:8d:23:d7:a6:47:29:c4:
         cf:cc:86:48:04:55:c0:fc:c5:ba:ef:37:24:b3:67:e4:00:f2:
         48:9a:06:2e:8b:7b:82:71:66:85:5a:40:49:55:de:67:70:e2:
         6e:2a:cc:28:fd:3b:3a:b1:26:3f:05:9e:0d:1c:16:ab:e6:53:
         c6:33:e5:ce:30:cc:ab:ad:5e:92:aa:af:55:7b:98:3c:ff:45:
         92:39:56:b3:26:29:9d:25:17:c6:fb:8f:33:32:75:d0:1e:59:
         47:05:ce:e4:17:ba:09:0b:24:0a:41:a8:20:bd:c5:d4:ae:ae:
         8d:d0:a9:d2:57:54:82:ec:d1:01:0c:ed:7d:d9:4c:04:77:7f:
         e6:f1:0c:9f:78:9e:1e:54:c4:6f:ab:0b:bf:8d:03:f9:21:d4:
         c5:5a:b6:fb:fd:a0:bc:db:16:f1:a9:4a:4d:80:ee:5d:cd:05:
         6c:75:6f:b6:cf:a4:13:33:39:3e:78:67:ad:82:57:57:c7:52:
         ed:4c:e1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org